System and method for secure personal information retrieval

Abstract

A transaction method using an electronic device. The method comprises detecting, during an online transaction, one or more fields capable of being automatically filled by the electronic device, the one or more fields associated with the online transaction. The method further comprises obtaining, using a sensor, biometric information of a user of the electronic device, and verifying an identity of the user of the electronic device based on the obtained biometric information. Additionally, the method includes, in response to verifying the identity of the user of the electronic device based on the obtained biometric information: identifying personal information of the user to be automatically filled into the one or more fields based on the verified identity, and inserting the identified personal information into the one or more fields for the online transaction.

What is claimed is: 
     
       1. A transaction method using an electronic device, the method comprising:
 detecting, by the electronic device, multiple entry fields in a financial application corresponding to an online transaction; 
 in response to the multiple entry fields being detected, obtaining, by a sensor of the electronic device, biometric information of a user of the electronic device, wherein the sensor senses at least one external physical biometric input by the user; 
 verifying the user of the electronic device by comparing the obtained biometric information with pre-stored biometric data of the user; and 
 in response to the user being verified based on the obtained biometric information, electronically auto-filling the multiple entry fields by:
 identifying, by the electronic device, multiple sets of personal information of the user, wherein each set of the multiple sets of personal information of the user comprises multiple personal information entries that are used for the online transaction, respectively, 
 displaying, by the electronic device, a list of the multiple sets of personal information of the user, 
 receiving, from a user, a selection of a set of personal information from the list, and 
 automatically inserting, by the electronic device, the personal information entries in the set of personal information corresponding to the received selection into the multiple entry fields for the online transaction. 
 
 
     
     
       2. The method of  claim 1 , further comprising:
 determining whether the multiple sets of personal information are pre-stored in a memory accessible by the electronic device; and 
 retrieving the one or more sets of personal information from the memory. 
 
     
     
       3. The method of  claim 1 , further comprising denying automatic inserting of the personal information entries into the multiple entry fields associated with the online transaction in response to the user of the electronic device not being verified based on the obtained biometric information. 
     
     
       4. The method of  claim 1 , wherein displaying the list of the multiple sets of the personal information of the user further comprises:
 masking credit card information that is retrieved from a payment subsystem; and 
 unmasking a full permanent account number through an application program interface. 
 
     
     
       5. The method of  claim 1 , further comprising:
 requesting entry of a new set of personal information of the user in accordance with the obtained biometric information of the user; and 
 storing the new set of personal information in a memory accessible by the electronic device, 
 wherein verifying the user of the electronic device is performed based on the obtained biometric information of the user before use of the new set of personal information in the online transaction. 
 
     
     
       6. The method of  claim 1 , wherein each set of the multiple sets of personal information corresponds to a credit card account including multiple credit card information entries. 
     
     
       7. The method of  claim 1 , wherein the sensor comprises one of a fingerprint sensor or an optical sensor. 
     
     
       8. The method of  claim 1 , wherein detecting the multiple entry fields comprises reading, on a browser, at least one of name field, identification field, or a value field of input tags to detect multiple fields. 
     
     
       9. An electronic device comprising:
 a memory electrically connected to at least one processor; 
 a sensor electrically connected to the at least one processor; and 
 the at least one processor configured to:
 detect, by the electronic device, multiple entry fields in a financial application corresponding to an online transaction; 
 in response to the multiple entry fields being detected, obtain, using the sensor, biometric information of a user of the electronic device, wherein the sensor senses at least one external physical biometric input by the user; 
 verify the user of the electronic device by comparing the obtained biometric information with pre-stored biometric data of the user; and 
 in response to the user being verified based on the obtained biometric information, electronically auto-filling the multiple entry fields by:
 identifying multiple sets of personal information of the user, wherein each set of the multiple sets of personal information of the user comprises multiple personal information entries that are used for the online transaction, respectively, 
 displaying a list of the multiple sets of personal information of the user; 
 receiving, from a user, a selection of a set of personal information from the list, and 
 automatically inserting the personal information entries into the multiple entry fields for the online transaction based on the selection of the set of personal information from the list. 
 
 
 
     
     
       10. The electronic device of  claim 9 , wherein the at least one processor is further configured to:
 determine whether multiple sets of personal information are pre-stored in the memory accessible by the electronic device; and 
 retrieve the multiple sets of personal information from the memory. 
 
     
     
       11. The electronic device of  claim 9 , wherein the at least one processor is further configured to deny automatic insertion of the personal information entries into the multiple entry fields associated with the online transaction in response to the user of the electronic device not being verified based on the obtained biometric information. 
     
     
       12. The electronic device of  claim 9 , wherein the at least one processor is further configured to:
 mask credit card information that is retrieved from a payment subsystem; and 
 unmask a full permanent account number through an application program interface. 
 
     
     
       13. The electronic device of  claim 9 , wherein the at least one processor is further configured to:
 request entry of a new set of personal information of the user in accordance with the obtained biometric information of the user; and 
 store the new set of personal information in the memory accessible by the electronic device, 
 wherein verification of the user of the electronic device is performed based on the obtained biometric information of the user before use of the new set of personal information in the online transaction. 
 
     
     
       14. The electronic device of  claim 9 , wherein each set of the multiple sets of personal information corresponds to a credit card account including multiple credit card information entries. 
     
     
       15. The electronic device of  claim 9 , wherein the sensor comprises one of a fingerprint sensor or an optical sensor. 
     
     
       16. The electronic device of  claim 9 , wherein the at least one processor is further configured to read, on a browser, at least one of name, identification, or a value field of input tags to detect multiple fields. 
     
     
       17. A non-transitory computer readable medium, comprising instructions, that when executed by at least one processor, perform a method comprising:
 detecting multiple entry fields in a financial application corresponding to an online transaction; 
 in response to the multiple entry fields being detected, obtaining, using a sensor, biometric information of a user of an electronic device, wherein the sensor senses at least one external physical biometric input by the user; 
 verifying the user of the electronic device by comparing the obtained biometric information with pre-stored biometric data of the user; the obtained biometric information; 
 in response to the user being verified based on the obtained biometric information, electronically auto-filling the multiple entry fields by:
 identifying, by the electronic device, multiple sets of personal information of the user, wherein each set of the multiple sets of personal information of the user comprises multiple personal information entries that are used for the online transaction, respectively, 
 displaying, by the electronic device, a list of the multiple sets of personal information of the user, 
 receiving, from a user, a selection of a set of personal information from the list, and 
 automatically inserting, by the electronic device, the personal information entries into the multiple entry fields for the online transaction based on the selection of the set of personal information from the list. 
 
 
     
     
       18. The non-transitory computer readable medium of  claim 17 , further comprising instructions, that when executed by the at least one processor, perform the method comprising:
 determining whether multiple sets of personal information are pre-stored in a memory accessible by the electronic device; and 
 retrieving the multiple sets of personal information from the memory. 
 
     
     
       19. The non-transitory computer readable medium of  claim 17 , further comprising instructions that when executed by the at least one processor, perform the method comprising, denying automatic inserting of the personal information entries into the multiple entry fields associated with the online transaction in response to the user of the electronic device not being verified based on the obtained biometric information. 
     
     
       20. The non-transitory computer readable medium of  claim 17 , further comprising instructions that when executed by the at least one processor, perform the method comprising:
 masking credit card information that is retrieved from a payment subsystem; and 
 unmasking a full permanent account number through an application program interface. 
 
     
     
       21. The non-transitory computer readable medium of  claim 17 , further comprising instructions that when executed by the at least one processor, perform the method comprising:
 requesting entry of a new set of personal information of the user in accordance with the obtained biometric information of the user; and 
 storing the new set of personal information in a memory accessible by the electronic device, 
 wherein verifying the user of the electronic device is performed based on the obtained biometric information of the user before use of the new set of personal information in the online transaction. 
 
     
     
       22. The non-transitory computer readable medium of  claim 17 , wherein each set of the multiple sets of personal information corresponds to a credit card account including multiple credit card information entries. 
     
     
       23. The non-transitory computer readable medium of  claim 17 , further comprising instructions that when executed by the at least one processor, perform the method comprising reading, on a browser, at least one of name field, identification field, or a value field of input tags to detect multiple fields.